WebAdmin and user portal TLS v1.0

Hello. Did you guys find a solution to this problem?

Apparently the latest versions came with no TLSv1 in configuration file but scanner still finding the problem.

Omner, can you tell/show us explicitly what the scan sees on which port?

Cheers - Bob

HI Bob,

This is the message:

SSL/TLS Server supports TLSv1.0 - port 443/tcp over SSL

That port (443) is the one I am using for my virtual web server.

I have been checking setting in GUI or even server but not able to disable support for TLSv1.

HI Bob,

This is the message:

SSL/TLS Server supports TLSv1.0 - port 443/tcp over SSL

That port (443) is the one I am using for my virtual web server.

I have been checking setting in GUI or even server but not able to disable support for TLSv1.

Does the scanner still see TLSv1 when you disable the Virtual Server?

Cheers - Bob

Bob, It is not possible for me to disable my virtual server, it is a production application.

Do you have other suggestion about how to troubleshot the issue?

Temporarily add a DNAT and then disable the Virtual Server.  As you can see in #2 in Rulz, the DNAT will "steal" the traffic away from the Virtual Server as soon as the NAT rule is activated.

Cheers - Bob